[PATCH] added SNMP configuration rule

Shawn Wells shawn at redhat.com
Wed Oct 24 15:02:53 UTC 2012


On 10/24/12 9:06 AM, David Smith wrote:
> +
> +<Rule id="snmpd_configuration_guidance" severity="medium">
> +<title>The SNMP Service Must Use only SNMPv3 or Newer </title>
> +<description>
> +Edit <tt>/etc/snmpd.conf</tt>, removing any references to <tt>v1</tt>, <tt>v2c</tt>, <tt>community</tt>, or <tt>com2sec</tt>.
> +Upon doing that, restart the SNMP service:
> +<pre># service snmpd restart</pre>
> +</description>
> +<ocil clause="there is output">
> +To ensure only SNMPv3 or newer is used, run the following command:
> +<pre># grep 'v1\|v2c\|community\|com2sec' /etc/snmpd.conf</pre>
> +There should be no output.

nack

Config file is in /etc/snmp/snmpd.conf with RHEL6



More information about the scap-security-guide mailing list